CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-119716 | HIGH | 8.1 | pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows tem… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119715 | MEDIUM | 4.3 | NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the au… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119714 | MEDIUM | 6.5 | My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that a… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119713 | HIGH | 8.8 | Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows ag… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119712 | MEDIUM | 6.4 | PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_si… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119711 | MEDIUM | 5.3 | PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unaut… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119710 | HIGH | 7.1 | PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticate… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119709 | MEDIUM | 5.8 | Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119708 | MEDIUM | 6.5 | abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the BlobManagem… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119707 | HIGH | 7.1 | SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /ap… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119706 | CRITICAL | 9.8 | InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerabili… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119705 | MEDIUM | 5.3 | SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that al… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119704 | MEDIUM | 6.8 | Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and jcp.sh su… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119703 | MEDIUM | 4.8 | xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServe… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119702 | MEDIUM | 6.5 | WPGraphQL before 2.24.1 contains a missing authorization vulnerability in the createComment mutation… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119701 | MEDIUM | 5.3 | WPGraphQL before 2.24.1 contains a missing rate limiting vulnerability that allows unauthenticated a… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119700 | MEDIUM | 5.3 | WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-119699 | MEDIUM | 5.3 | WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-119479 | MEDIUM | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Croco… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-119369 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-30 |